This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: N343H/WQ2WQRiEXITA2qEnCZ7QuDrIRlFzqb2fVledE= Subject key identifier: E5:4D:38:E5:AA:D0:F4:6E:50:A2:61:39:C4:AF:0F:07:4F:12:26:10 Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 6B1BFA7D53785FB6E69BF2DA0F966B63CD9D1D27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 023D Signing time: Thu 18 Dec 2025 04:51:22 +0000 Manifest this update: Thu 18 Dec 2025 04:46:22 +0000 Manifest next update: Sun 21 Dec 2025 10:06:22 +0000 Files and hashes: 1: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: mQ2+DWe3Qudy9qKaOAvl3KHYZU4dXUYzBKmJnaWGYWs=) 2: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) 3: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 4: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1b:fa:7d:53:78:5f:b6:e6:9b:f2:da:0f:96:6b:63:cd:9d:1d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Dec 18 04:46:22 2025 GMT Not After : Dec 21 10:06:22 2025 GMT Subject: CN=E54D38E5AAD0F46E50A26139C4AF0F074F122610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:52:97:46:b7:2a:6a:14:2b:25:df:55:c8: 99:a1:5a:9b:91:42:15:4a:97:1f:34:db:17:a2:b0: 81:19:4d:15:e1:90:29:2e:f5:f9:fb:e5:c6:47:88: 82:fc:b0:64:c1:c0:a2:3e:e1:f0:27:88:48:dd:7a: db:41:07:09:b6:a9:7e:4e:62:d7:e7:bd:b3:11:2b: 03:eb:40:3a:45:93:2a:50:45:6d:d3:67:e5:40:dc: 4d:87:39:24:7b:ba:f4:f1:c0:ad:7a:55:a0:b4:08: 3c:24:bd:53:12:16:7d:98:26:0f:68:6b:92:53:e5: 21:40:dc:bc:7d:d4:93:9f:06:4b:09:93:7e:e7:04: fb:7f:4f:a2:23:94:08:96:36:2d:a5:cb:b5:d5:8a: c8:05:ff:83:d8:38:b0:f2:b4:9b:a5:c0:69:71:9c: dc:5c:43:be:e4:38:1d:26:c2:57:01:f9:15:0b:3b: f0:24:60:d9:e9:f3:57:42:f9:57:b3:91:c2:5f:80: ed:b0:8e:9e:27:a8:a0:8e:1c:e3:dc:26:8d:0b:fa: 74:09:2e:d5:ba:ea:97:35:66:68:c1:78:98:b8:5e: e7:b0:2d:88:92:4e:ac:24:e8:a9:47:22:43:e0:c8: 21:29:f8:4e:8e:41:4d:7c:82:44:ee:ab:a5:28:e7: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:38:E5:AA:D0:F4:6E:50:A2:61:39:C4:AF:0F:07:4F:12:26:10 X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:df:fc:67:91:90:cd:38:f6:12:af:b5:73:23:4b:ed:f5:d7: 10:50:8e:1a:4c:c6:0d:a2:6d:2c:e8:c2:4f:02:2f:24:85:4a: e0:b5:30:18:69:5a:34:30:65:0d:bf:15:d5:98:f0:a1:a9:22: d9:04:01:b6:0d:d3:e8:c7:5e:15:66:0e:ad:75:bb:08:d7:c8: 65:e8:1f:42:d7:02:0a:46:df:3b:11:50:52:52:5a:a1:1a:4b: a5:82:e0:1e:f4:d2:80:7f:08:44:05:8c:36:18:ac:42:aa:35: a5:02:ce:d1:66:13:76:92:cb:c4:67:ff:f1:c1:c9:38:33:9e: e1:2b:4e:c0:38:30:9b:f3:6d:99:f0:07:c6:31:e2:f1:34:81: 8b:77:b7:08:f9:01:f4:0b:0a:1d:b8:ea:37:53:2e:56:d0:7b: cd:6e:cd:e5:bb:28:68:ef:7a:48:e0:c3:65:f2:09:e7:a0:92: bf:92:0e:c1:b3:e4:aa:48:6c:66:6d:5b:00:f4:ef:2d:c4:32: 8f:58:83:b9:7a:df:66:8f:20:b2:b0:c5:04:90:7e:0c:94:3a: 00:fa:59:5a:07:e4:2a:5b:72:ec:54:be:59:91:c0:79:d8:4c: bd:43:5d:5b:43:bf:0c:49:05:69:fc:25:ce:02:b0:4e:88:e2: 4c:92:f9:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxv6fVN4X7bmm/LaD5ZrY82dHScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTEyMTgwNDQ2MjJaFw0yNTEyMjExMDA2MjJaMDMxMTAvBgNV BAMTKEU1NEQzOEU1QUFEMEY0NkU1MEEyNjEzOUM0QUYwRjA3NEYxMjI2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChw1KXRrcqahQrJd9VyJmhWpuR QhVKlx802xeisIEZTRXhkCku9fn75cZHiIL8sGTBwKI+4fAniEjdettBBwm2qX5O YtfnvbMRKwPrQDpFkypQRW3TZ+VA3E2HOSR7uvTxwK16VaC0CDwkvVMSFn2YJg9o a5JT5SFA3Lx91JOfBksJk37nBPt/T6IjlAiWNi2ly7XVisgF/4PYOLDytJulwGlx nNxcQ77kOB0mwlcB+RULO/AkYNnp81dC+VezkcJfgO2wjp4nqKCOHOPcJo0L+nQJ LtW66pc1ZmjBeJi4XuewLYiSTqwk6KlHIkPgyCEp+E6OQU18gkTuq6Uo54IDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5U045arQ9G5QomE5xK8PB08SJhAwHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDf/GeRkM049hKvtXMjS+311xBQjhpMxg2i bSzowk8CLySFSuC1MBhpWjQwZQ2/FdWY8KGpItkEAbYN0+jHXhVmDq11uwjXyGXo H0LXAgpG3zsRUFJSWqEaS6WC4B700oB/CEQFjDYYrEKqNaUCztFmE3aSy8Rn//HB yTgznuErTsA4MJvzbZnwB8Yx4vE0gYt3twj5AfQLCh246jdTLlbQe81uzeW7KGjv ekjgw2XyCeegkr+SDsGz5KpIbGZtWwD07y3EMo9Yg7l632aPILKwxQSQfgyUOgD6 WVoH5CpbcuxUvlmRwHnYTL1DXVtDvwxJBWn8Jc4CsE6I4kyS+Qo= -----END CERTIFICATE-----Generated at Thu Dec 18 23:33:18 2025 by rpki-client